@blocklet/xss/cjs/index.js

blocklet prevent xss attack

"use strict";

Object.defineProperty(exports, "__esModule", {
  value: true
});
var _exportNames = {
  xss: true
};

exports.xss = xss;
var _utils = require("./utils");
Object.keys(_utils).forEach(function (key) {
  if (key === "default" || key === "__esModule") return;
  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
  if (key in exports && exports[key] === _utils[key]) return;
  Object.defineProperty(exports, key, {
    enumerable: true,
    get: function () {
      return _utils[key];
    }
  });
});
function xss(options = {}) {
  const sanitize = (0, _utils.initSanitize)(options);
  return (req, res, next) => {
    ["body", "params", "headers", "query"].forEach(k => {
      if (req[k]) {
        req[k] = sanitize(req[k]);
      }
    });
    next();
  };
}
module.exports = {
  xss,
  initSanitize: _utils.initSanitize,
  isSvgFile: _utils.isSvgFile,
  sanitizeSvg: _utils.sanitizeSvg
};